CVE-2020-21787

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

CVE-2022-44289

Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell...

Unrestricted file upload

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php...

PT-2021-10665

Name of the Vulnerable Software and Affected Versions: CRMEB versions 3.1.0 and later Description: The issue concerns a File Upload Getshell vulnerability via the /crmeb/crmeb/services/UploadService.php endpoint. This allows for potential exploitation. Recommendations: For CRMEB versions 3.1.0 an...